aae90a783065350970b1fce49fb2d75a65a99e76f66dafe690a3ba5e79351cb7 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23-01-2024 23:02

Sharing

Report Analysis Logs

General

Target

70ca09333cb85a9c6af4e901609327e1.pdf
Size

35KB
MD5

70ca09333cb85a9c6af4e901609327e1
SHA1

d4785d38708a9a79f2f1ebaf46342e77f742d422
SHA256

aae90a783065350970b1fce49fb2d75a65a99e76f66dafe690a3ba5e79351cb7
SHA512

6cd15fc06bba17684804267c30892894135ae54fc9cf9972251739ec2a819a0b906650c0210788515f9396bbea090200625c7021561532cee7a2123c2e24bec9
SSDEEP

768:OhqyA82lZAvezvv57hTkeYgXKAbct4KLxeX7LDH:aq7Zlrjv5tThXBct4Ku7HH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2296	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2296	AcroRd32.exe
2296	AcroRd32.exe
2296	AcroRd32.exe
2296	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70ca09333cb85a9c6af4e901609327e1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fcd14b5d2b8177073c44f45f99306196

SHA1
075f56061ddfad9c2c56c2b21786d9e82b0181a9

SHA256
3772435ef9417b1bafddd52aaa8347b6a85a768e9c4e429ef1439f31c5f8df71

SHA512
9188c4824bd8b910400a103079dee8618b9d059e78887f47c2dc4a2f7cbeebf149911085ddf7ad990eecea004f0c26c3308136543adac3bd236c44a327620116

Download Submit